5b946141d35d56f171f3764df3505af5[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

5b946141d35d56f171f3764df3505af5.exe
Size

405KB
MD5

5b946141d35d56f171f3764df3505af5
SHA1

b4b3a3bc9f8640990df5b1c192f432f3f9285665
SHA256

55daafc56cbac32100944d17ea6d2a13a365f5987acaf5ca8c593c30e0c16c96
SHA512

0e1b6b2c13b804ff20f309484cd5de29474f882a680b38d768d8c6b86bef6d9a8155a616fac5816e47996b6658c97066d45e4fb0ad191a700c45c7a2d5a1ee46
SSDEEP

6144:BHMaG80jTgB7kyQBIvji0rwzPN/5jK9SpKNqw3lfjeN0UpUiCigavwVf:6aG80jTCgyqIvji0sN/QSkbGUg

Score

N/A

Malware Config

Signatures

Files

5b946141d35d56f171f3764df3505af5.exe
.exe windows x86

c69e88423d6ba76171ae4ccf927da66b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

PulseEvent
SetDefaultCommConfigA
GetConsoleAliasesLengthW
FreeLibrary
InterlockedIncrement
MoveFileExW
OpenJobObjectA
GetCurrentProcess
WaitForSingleObject
GetTickCount
EnumCalendarInfoExW
GetUserDefaultLangID
GetEnvironmentStrings
FindResourceExA
GlobalAlloc
LoadLibraryW
GetConsoleMode
GetFileAttributesW
ReplaceFileW
GetAtomNameW
GetGeoInfoA
GetSystemDirectoryA
GetBinaryTypeW
SetConsoleTitleA
GetShortPathNameA
LCMapStringA
GetLastError
SetLastError
GetProcAddress
LoadLibraryA
GetProcessId
RemoveDirectoryW
GetDiskFreeSpaceA
GetCommTimeouts
GetFileTime
OpenEventW
HeapAlloc
MultiByteToWideChar
GetModuleHandleW
ExitProcess
DecodePointer
GetCommandLineW
HeapSetInformation
GetStartupInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
HeapFree
WriteFile
GetStdHandle
GetModuleFileNameW
HeapCreate
GetCPInfo
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
RtlUnwind
WideCharToMultiByte
GetConsoleCP
SetHandleCount
GetFileType
DeleteCriticalSection
SetFilePointer
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
LCMapStringW
GetStringTypeW
ReadFile
CloseHandle
CreateFileA
WriteConsoleW
SetStdHandle
FlushFileBuffers
IsProcessorFeaturePresent
HeapSize
HeapReAlloc
SetEndOfFile
GetProcessHeap
CreateFileW

Sections

.text
Size: 235KB - Virtual size: 235KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 4.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wayayov
Size: 1024B - Virtual size: 624B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.leki
Size: 512B - Virtual size: 23B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c69e88423d6ba76171ae4ccf927da66b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 235KB - Virtual size: 235KB

.data Size: 66KB - Virtual size: 4.8MB

.wayayov Size: 1024B - Virtual size: 624B

.leki Size: 512B - Virtual size: 23B

.rsrc Size: 100KB - Virtual size: 100KB

.text
Size: 235KB - Virtual size: 235KB

.data
Size: 66KB - Virtual size: 4.8MB

.wayayov
Size: 1024B - Virtual size: 624B

.leki
Size: 512B - Virtual size: 23B

.rsrc
Size: 100KB - Virtual size: 100KB